| *** oomichi has quit IRC | 00:01 | |
| notmorgan | jamielennox: __ | 00:01 |
|---|---|---|
| notmorgan | jamielennox: ++ lets do that | 00:01 |
| openstackgerrit | ayoung proposed openstack/keystone: Implied Roles https://review.openstack.org/242614 | 00:03 |
| *** roxanaghe has joined #openstack-keystone | 00:03 | |
| jamielennox | notmorgan: i just realized it was running way too many scenarios | 00:04 |
| *** e0ne has quit IRC | 00:04 | |
| jamielennox | mostly because client code is not well organized | 00:04 |
| *** davechen has left #openstack-keystone | 00:05 | |
| *** pumaranikar has quit IRC | 00:06 | |
| *** pumaranikar has joined #openstack-keystone | 00:07 | |
| *** oomichi has joined #openstack-keystone | 00:09 | |
| *** aginwala has quit IRC | 00:11 | |
| *** pumaranikar has quit IRC | 00:11 | |
| openstackgerrit | ayoung proposed openstack/oslo.policy: Convert Exceptions to failures. https://review.openstack.org/165908 | 00:13 |
| *** lhcheng has quit IRC | 00:15 | |
| *** errr has joined #openstack-keystone | 00:17 | |
| *** aginwala has joined #openstack-keystone | 00:17 | |
| *** pumaranikar has joined #openstack-keystone | 00:18 | |
| *** pumaranikar has quit IRC | 00:19 | |
| *** pumaranikar has joined #openstack-keystone | 00:20 | |
| *** RichardRaseley has quit IRC | 00:21 | |
| *** EinstCrazy has quit IRC | 00:25 | |
| *** pumaranikar has quit IRC | 00:25 | |
| *** gildub has joined #openstack-keystone | 00:26 | |
| *** slberger has left #openstack-keystone | 00:28 | |
| notmorgan | jamielennox: yeah | 00:28 |
| *** david-lyle has joined #openstack-keystone | 00:36 | |
| *** david-lyle_ has quit IRC | 00:36 | |
| *** Guest23397 is now known as tsymanczyk | 00:37 | |
| *** shaleh has quit IRC | 00:47 | |
| *** andreykurilin__ has quit IRC | 00:52 | |
| *** btully has quit IRC | 00:53 | |
| *** pgbridge has quit IRC | 00:56 | |
| *** EinstCrazy has joined #openstack-keystone | 00:58 | |
| *** aginwala has quit IRC | 01:07 | |
| *** oomichi_ has joined #openstack-keystone | 01:09 | |
| *** oomichi has quit IRC | 01:11 | |
| *** oomichi_ has quit IRC | 01:12 | |
| *** oomichi has joined #openstack-keystone | 01:12 | |
| *** aginwala has joined #openstack-keystone | 01:12 | |
| *** niusmallnan has joined #openstack-keystone | 01:15 | |
| *** yangyapeng has joined #openstack-keystone | 01:20 | |
| *** chlong has joined #openstack-keystone | 01:21 | |
| *** henrynash_ has joined #openstack-keystone | 01:28 | |
| *** ChanServ sets mode: +v henrynash_ | 01:28 | |
| *** henrynash has quit IRC | 01:28 | |
| *** henrynash_ is now known as henrynash | 01:28 | |
| *** markvoelker has quit IRC | 01:29 | |
| *** browne has quit IRC | 01:29 | |
| openstackgerrit | Merged openstack/python-keystoneclient: Add include_subtree to role_list_assignments call https://review.openstack.org/188184 | 01:55 |
| *** dims has quit IRC | 01:59 | |
| *** lhcheng has joined #openstack-keystone | 02:04 | |
| *** ChanServ sets mode: +v lhcheng | 02:04 | |
| *** lhcheng has quit IRC | 02:09 | |
| *** roxanaghe has quit IRC | 02:14 | |
| *** btully has joined #openstack-keystone | 02:17 | |
| *** btully has quit IRC | 02:21 | |
| *** topol has joined #openstack-keystone | 02:25 | |
| *** ChanServ sets mode: +v topol | 02:25 | |
| *** markvoelker has joined #openstack-keystone | 02:29 | |
| *** topol has quit IRC | 02:30 | |
| *** markvoelker has quit IRC | 02:34 | |
| *** rha has quit IRC | 02:40 | |
| *** ayoung has joined #openstack-keystone | 02:40 | |
| *** ChanServ sets mode: +v ayoung | 02:40 | |
| *** gyee has quit IRC | 02:41 | |
| openstackgerrit | Jamie Lennox proposed openstack/python-keystoneclient: Make tests run against original client and sessions https://review.openstack.org/117089 | 02:50 |
| openstackgerrit | Jamie Lennox proposed openstack/python-keystoneclient: Seperate Client base test class https://review.openstack.org/258230 | 02:50 |
| *** csoukup has joined #openstack-keystone | 02:55 | |
| *** aginwala has quit IRC | 02:59 | |
| *** aginwala has joined #openstack-keystone | 03:03 | |
| mordred | lifeless: what did I do? | 03:20 |
| lifeless | mordred: suckered me into hacking on pbr | 03:20 |
| *** browne has joined #openstack-keystone | 03:25 | |
| *** fangxu has quit IRC | 03:28 | |
| mordred | lifeless: fair | 03:39 |
| *** dims has joined #openstack-keystone | 03:45 | |
| *** markvoelker has joined #openstack-keystone | 03:46 | |
| *** markvoelker has quit IRC | 03:50 | |
| openstackgerrit | Merged openstack/oslo.policy: Updated from global requirements https://review.openstack.org/258052 | 04:02 |
| wanghua | jamielennox: ping | 04:07 |
| jamielennox | wanghua: yep | 04:07 |
| wanghua | jamielennox: I meet a problem. I want to access openstack service in vm. Is there an secure way to do it? | 04:08 |
| jamielennox | wanghua: besides TLS? | 04:08 |
| wanghua | jamielennox: like vm sends signal to heat to tell it some work is done. | 04:09 |
| wanghua | jamielennox: I find heat create a user with a limited role for it. | 04:10 |
| jamielennox | so heat typically does that by setting up a trust to the user heat controls | 04:10 |
| wanghua | jamielennox: If vm want to communicate with heat, it need credentials | 04:11 |
| wanghua | jamielennox: Should we create a user for the vm? | 04:13 |
| wanghua | jamielennox: Or all the vms use the same user, and create a different trust for each vm | 04:13 |
| jamielennox | so communicating from the VMs that we create back to the control plane is a problem we don't really have a solution for | 04:13 |
| jamielennox | it's a problem for heat, but also the databases | 04:14 |
| jamielennox | sahara and trove | 04:14 |
| wanghua | jamielennox: I wonder how aws address similar problems | 04:16 |
| jamielennox | there's a bunch of ways it could be done | 04:17 |
| jamielennox | temp urls, signed limited tokens | 04:18 |
| jamielennox | we had a bit of a discussion at summit but nothing was reached | 04:18 |
| jamielennox | really for most of those cases you need the services to come up with something - i doubt it would be controlled from keystone | 04:18 |
| wanghua | jamielennox: tokens have expiration time | 04:18 |
| *** dims has quit IRC | 04:20 | |
| *** aginwala has quit IRC | 04:22 | |
| *** aginwala has joined #openstack-keystone | 04:24 | |
| *** aginwala has quit IRC | 04:29 | |
| stevemar | bknudson: happy birthday? | 04:33 |
| *** btully has joined #openstack-keystone | 04:55 | |
| *** eglute_s is now known as eglute | 05:00 | |
| *** ryansb has quit IRC | 05:11 | |
| *** Nirupama has joined #openstack-keystone | 05:13 | |
| *** zqfan_AFK has joined #openstack-keystone | 05:20 | |
| *** links has joined #openstack-keystone | 05:34 | |
| stevemar | the channel is dead : | 05:43 |
| stevemar | :| | 05:43 |
| openstackgerrit | Jamie Lennox proposed openstack/python-keystoneclient: Seperate Client base test class https://review.openstack.org/258230 | 05:43 |
| openstackgerrit | Jamie Lennox proposed openstack/python-keystoneclient: Make tests run against original client and sessions https://review.openstack.org/117089 | 05:43 |
| *** markvoelker has joined #openstack-keystone | 05:46 | |
| *** markvoelker has quit IRC | 05:51 | |
| notmorgan | stevemar: shhhhh | 05:59 |
| notmorgan | we're all asleep | 05:59 |
| stevemar | notmorgan: shhhh | 05:59 |
| *** oomichi has quit IRC | 06:04 | |
| jamielennox | stevemar: gah, deprecations here is way harder than expected, everything is intertwined | 06:08 |
| notmorgan | jamielennox: it's a painful thing to deprecate anythign | 06:09 |
| notmorgan | :) | 06:09 |
| notmorgan | erm :( | 06:09 |
| stevemar | jamielennox: if anyone can do it, it's you | 06:09 |
| jamielennox | yea, but there's going to be deprecations within deprecations | 06:09 |
| stevemar | save us jamie-lennox-wan, you are our only hope | 06:09 |
| jamielennox | i've started it off in like 3 different places and none make sense | 06:09 |
| notmorgan | so deprecate all the things | 06:09 |
| *** gildub has quit IRC | 06:13 | |
| *** urulama has quit IRC | 06:24 | |
| *** urulama has joined #openstack-keystone | 06:25 | |
| *** csoukup has quit IRC | 06:30 | |
| *** richm has quit IRC | 06:33 | |
| openstackgerrit | Ken'ichi Ohmichi proposed openstack/keystone: Enable os_inherit of Keystone v3 API https://review.openstack.org/257580 | 06:46 |
| *** markvoelker has joined #openstack-keystone | 06:47 | |
| *** markvoelker has quit IRC | 06:52 | |
| notmorgan | lol | 06:54 |
| *** rcernin has joined #openstack-keystone | 07:01 | |
| *** aginwala has joined #openstack-keystone | 07:03 | |
| *** rcernin_ has joined #openstack-keystone | 07:12 | |
| *** rcernin has quit IRC | 07:13 | |
| *** rcernin_ has quit IRC | 07:21 | |
| *** rcernin has joined #openstack-keystone | 07:22 | |
| *** boris-42_ has quit IRC | 07:23 | |
| openstackgerrit | Bernhard M. Wiedemann proposed openstack/python-keystoneclient: Replace textwrap with fast standard code https://review.openstack.org/252355 | 07:27 |
| openstackgerrit | Merged openstack/keystonemiddleware: Don't list deprecated opts in sample config https://review.openstack.org/253972 | 07:28 |
| openstackgerrit | Merged openstack/python-keystoneclient: remove oslo-incubator's memorycache https://review.openstack.org/257131 | 07:28 |
| openstackgerrit | Merged openstack/python-keystoneclient: remove venv bits from tools https://review.openstack.org/258175 | 07:29 |
| openstackgerrit | Merged openstack/python-keystoneclient: move hacking to tests folder https://review.openstack.org/258183 | 07:29 |
| *** WangDarren has joined #openstack-keystone | 07:29 | |
| WangDarren | oh hi everyone, I just read bp-reseller, I wonder if "domain" will be removed in Mitaka release because it seems to be a big change. Thanks! | 07:32 |
| stevemar | WangDarren: "domains" will still exist, we'll just be changing the underlying implementation | 07:36 |
| stevemar | WangDarren: but it probably won't happen in the mitaka release, that bp was been slow moving | 07:36 |
| WangDarren | Thanks, because "domain" seems still useful to our case, we are worried if it's removed in the near future~ | 07:37 |
| *** mfedosin has joined #openstack-keystone | 07:38 | |
| *** rha has joined #openstack-keystone | 07:38 | |
| *** rha has joined #openstack-keystone | 07:38 | |
| *** btully has quit IRC | 07:41 | |
| openstackgerrit | Steve Martinelli proposed openstack/oslo.policy: clean up incorrect formatting for precedence table https://review.openstack.org/258297 | 07:42 |
| *** fangxu has joined #openstack-keystone | 07:43 | |
| stevemar | WangDarren: nah, it'll just be the underlying implementation, we'll still honor the APIs | 07:43 |
| WangDarren | stevemar: I see, thank you Steve. | 07:44 |
| stevemar | np | 07:44 |
| *** Nirupama has quit IRC | 07:46 | |
| openstackgerrit | leo proposed openstack/keystone: testforbug1526647 https://review.openstack.org/258300 | 07:48 |
| openstackgerrit | Steve Martinelli proposed openstack/python-keystoneclient: remove keystoneclient.apiclient.exceptions https://review.openstack.org/258302 | 07:52 |
| stevemar | jamielennox: ^ | 07:52 |
| openstackgerrit | Rui Chen proposed openstack/python-keystoneclient: Fix Resource.__eq__ mismatch semantics of object equal https://review.openstack.org/251841 | 07:53 |
| openstackgerrit | Merged openstack/keystoneauth: Deprecated tox -downloadcache option removed https://review.openstack.org/256689 | 07:55 |
| openstackgerrit | Merged openstack/keystonemiddleware: Updated from global requirements https://review.openstack.org/258041 | 07:57 |
| openstackgerrit | Merged openstack/keystonemiddleware: Make BaseAuthProtocol public https://review.openstack.org/255691 | 07:58 |
| openstackgerrit | Merged openstack/keystoneauth: Provide a RFC 7231 compliant user agent string https://review.openstack.org/256002 | 07:59 |
| *** aginwala has quit IRC | 08:07 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Enable os_inherit of Keystone v3 API https://review.openstack.org/257580 | 08:10 |
| *** mfedosin has quit IRC | 08:10 | |
| *** aginwala has joined #openstack-keystone | 08:14 | |
| *** btully has joined #openstack-keystone | 08:15 | |
| *** Nirupama has joined #openstack-keystone | 08:16 | |
| *** chlong has quit IRC | 08:17 | |
| *** e0ne has joined #openstack-keystone | 08:18 | |
| *** btully has quit IRC | 08:19 | |
| *** alexpro has quit IRC | 08:23 | |
| *** e0ne has quit IRC | 08:23 | |
| *** alexpro has joined #openstack-keystone | 08:23 | |
| *** e0ne has joined #openstack-keystone | 08:24 | |
| *** bknudson has quit IRC | 08:31 | |
| *** browne has quit IRC | 08:34 | |
| *** lhcheng has joined #openstack-keystone | 08:40 | |
| *** ChanServ sets mode: +v lhcheng | 08:40 | |
| openstackgerrit | Rushi Agrawal proposed openstack/python-keystoneclient: Docstring: Mark optional parameter as optional. https://review.openstack.org/258349 | 08:40 |
| *** pnavarro has joined #openstack-keystone | 08:40 | |
| openstackgerrit | Merged openstack/keystone: Updating sample configuration file https://review.openstack.org/256053 | 08:44 |
| *** WangDarren has quit IRC | 08:48 | |
| *** markvoelker has joined #openstack-keystone | 08:48 | |
| *** rcernin has quit IRC | 08:50 | |
| *** aginwala has quit IRC | 08:52 | |
| *** markvoelker has quit IRC | 08:53 | |
| *** dims has joined #openstack-keystone | 08:55 | |
| *** fhubik has joined #openstack-keystone | 08:58 | |
| *** gildub has joined #openstack-keystone | 08:59 | |
| *** e0ne has quit IRC | 09:04 | |
| *** rcernin has joined #openstack-keystone | 09:08 | |
| *** mhickey has joined #openstack-keystone | 09:10 | |
| *** dims has quit IRC | 09:13 | |
| *** jistr has joined #openstack-keystone | 09:13 | |
| *** fhubik is now known as fhubik_brb | 09:14 | |
| *** fhubik_brb is now known as fhubik | 09:14 | |
| *** alexpro has quit IRC | 09:15 | |
| *** lhcheng has quit IRC | 09:21 | |
| *** csoukup has joined #openstack-keystone | 09:27 | |
| *** csoukup has quit IRC | 09:31 | |
| *** lhcheng has joined #openstack-keystone | 09:37 | |
| *** ChanServ sets mode: +v lhcheng | 09:37 | |
| *** mfedosin has joined #openstack-keystone | 09:37 | |
| openstackgerrit | Bernhard M. Wiedemann proposed openstack/python-keystoneclient: Replace textwrap with fast standard code https://review.openstack.org/252355 | 09:49 |
| *** henrynash has quit IRC | 09:55 | |
| *** niusmallnan has left #openstack-keystone | 09:57 | |
| *** e0ne has joined #openstack-keystone | 09:57 | |
| openstackgerrit | Grzegorz Grasza (xek) proposed openstack/keystone: Use the new enginefacade from oslo.db https://review.openstack.org/257458 | 10:01 |
| *** btully has joined #openstack-keystone | 10:03 | |
| *** Nirupama has quit IRC | 10:05 | |
| breton | coudl someone please set bug 1526686 as won't fix? | 10:07 |
| openstack | bug 1526686 in python-keystoneclient "very poor perfomance with PKI tokens" [Undecided,In progress] https://launchpad.net/bugs/1526686 - Assigned to Bernhard M. Wiedemann (ubuntubmw) | 10:07 |
| *** btully has quit IRC | 10:07 | |
| *** fhubik is now known as fhubik_brb | 10:08 | |
| *** fhubik_brb is now known as fhubik | 10:08 | |
| *** aix has joined #openstack-keystone | 10:30 | |
| *** urulama has quit IRC | 10:39 | |
| *** urulama has joined #openstack-keystone | 10:40 | |
| *** markvoelker has joined #openstack-keystone | 10:49 | |
| *** fhubik is now known as fhubik_brb | 10:52 | |
| *** markvoelker has quit IRC | 10:53 | |
| *** gildub has quit IRC | 10:55 | |
| *** aix has quit IRC | 10:59 | |
| *** aix has joined #openstack-keystone | 11:00 | |
| *** richm has joined #openstack-keystone | 11:04 | |
| *** lhcheng_ has joined #openstack-keystone | 11:06 | |
| *** lhcheng has quit IRC | 11:06 | |
| *** fhubik_brb is now known as fhubik | 11:07 | |
| *** vgridnev has joined #openstack-keystone | 11:13 | |
| *** EinstCrazy has quit IRC | 11:24 | |
| *** yangyapeng has quit IRC | 11:24 | |
| *** ryansb has joined #openstack-keystone | 11:34 | |
| *** ryansb has quit IRC | 11:34 | |
| *** ryansb has joined #openstack-keystone | 11:34 | |
| *** goodygum has joined #openstack-keystone | 11:51 | |
| *** fhubik is now known as fhubik_brb | 12:01 | |
| *** doug-fish has joined #openstack-keystone | 12:03 | |
| *** vgridnev has quit IRC | 12:04 | |
| *** vgridnev has joined #openstack-keystone | 12:10 | |
| openstackgerrit | Akira YOSHIYAMA proposed openstack/oslo.policy: Fixes combined "and" and "or" rule handling https://review.openstack.org/253763 | 12:13 |
| *** egonzalez has joined #openstack-keystone | 12:14 | |
| *** EinstCrazy has joined #openstack-keystone | 12:22 | |
| *** gordc has joined #openstack-keystone | 12:28 | |
| *** raildo-afk is now known as raildo | 12:28 | |
| *** markvoelker has joined #openstack-keystone | 12:35 | |
| *** lhcheng_ has quit IRC | 12:37 | |
| *** markvoelker has quit IRC | 12:39 | |
| marekd | rodrigods: stevemar: I am taking care of SP filtering...I will code it by mitaka-2 | 12:56 |
| *** links has quit IRC | 12:57 | |
| *** rcernin has quit IRC | 12:58 | |
| *** markvoelker has joined #openstack-keystone | 13:09 | |
| *** chlong has joined #openstack-keystone | 13:11 | |
| *** rcernin has joined #openstack-keystone | 13:13 | |
| *** lhcheng has joined #openstack-keystone | 13:14 | |
| *** ChanServ sets mode: +v lhcheng | 13:14 | |
| *** pnavarro has quit IRC | 13:16 | |
| *** woodster_ has joined #openstack-keystone | 13:25 | |
| *** breitz has quit IRC | 13:32 | |
| *** breitz has joined #openstack-keystone | 13:32 | |
| *** dslev_ has quit IRC | 13:38 | |
| *** dslev has joined #openstack-keystone | 13:49 | |
| *** fhubik_brb is now known as fhubik | 13:52 | |
| *** lhcheng has quit IRC | 13:52 | |
| *** topol has joined #openstack-keystone | 13:55 | |
| *** ChanServ sets mode: +v topol | 13:55 | |
| *** fhubik is now known as fhubik_brb | 13:57 | |
| *** fhubik_brb is now known as fhubik | 13:57 | |
| *** rcernin has quit IRC | 14:06 | |
| *** fhubik is now known as fhubik_brb | 14:09 | |
| *** ekarlso has quit IRC | 14:10 | |
| *** mdavidson has quit IRC | 14:11 | |
| *** fhubik_brb is now known as fhubik | 14:12 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Enable OpenDirectory support https://review.openstack.org/258528 | 14:12 |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Constraint to prevent duplicates endpoints https://review.openstack.org/134095 | 14:16 |
| *** richm has quit IRC | 14:19 | |
| *** daemontool has joined #openstack-keystone | 14:19 | |
| *** richm has joined #openstack-keystone | 14:24 | |
| dstanek | ugg.... i wanted to get the legacy tests running in a single process, but i think i've spent way too long on this | 14:31 |
| *** bknudson has joined #openstack-keystone | 14:52 | |
| *** ChanServ sets mode: +v bknudson | 14:52 | |
| *** fhubik is now known as fhubik_brb | 14:54 | |
| *** daemontool_ has joined #openstack-keystone | 14:54 | |
| *** daemontool has quit IRC | 14:56 | |
| *** daemontool_ has quit IRC | 14:59 | |
| *** slberger has joined #openstack-keystone | 15:00 | |
| xek | zzzeek, Hi | 15:01 |
| *** spotz_zzz is now known as spotz | 15:04 | |
| *** pumaranikar has joined #openstack-keystone | 15:04 | |
| *** davechen1 has joined #openstack-keystone | 15:09 | |
| *** jaosorior has joined #openstack-keystone | 15:11 | |
| *** ayoung has quit IRC | 15:12 | |
| *** csoukup has joined #openstack-keystone | 15:12 | |
| *** davechen1 has left #openstack-keystone | 15:13 | |
| *** davechen1 has joined #openstack-keystone | 15:13 | |
| *** pnavarro has joined #openstack-keystone | 15:13 | |
| *** btully has joined #openstack-keystone | 15:13 | |
| *** davechen1 is now known as davechen | 15:14 | |
| *** timcline has joined #openstack-keystone | 15:18 | |
| *** davechen1 has joined #openstack-keystone | 15:30 | |
| *** egonzalez has quit IRC | 15:30 | |
| *** edmondsw has joined #openstack-keystone | 15:31 | |
| *** davechen has quit IRC | 15:31 | |
| *** davechen1 is now known as davechen | 15:32 | |
| *** lhcheng has joined #openstack-keystone | 15:37 | |
| *** ChanServ sets mode: +v lhcheng | 15:37 | |
| *** edmondsw has quit IRC | 15:38 | |
| *** daemontool has joined #openstack-keystone | 15:40 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Assignment manager using unified delegation https://review.openstack.org/257527 | 15:41 |
| *** vgridnev has quit IRC | 15:42 | |
| *** tonytan4ever has joined #openstack-keystone | 15:44 | |
| *** spotz is now known as spotz_zzz | 15:45 | |
| *** zqfan_AFK has quit IRC | 15:51 | |
| *** pumaranikar has quit IRC | 15:56 | |
| openstackgerrit | Corey Bryant proposed openstack/keystoneauth: Iterate over copy of session.adapters keys in Python2/3 https://review.openstack.org/258594 | 15:57 |
| *** pgbridge has joined #openstack-keystone | 15:59 | |
| *** ninag has joined #openstack-keystone | 16:00 | |
| *** spotz_zzz is now known as spotz | 16:00 | |
| *** pmath has joined #openstack-keystone | 16:08 | |
| openstackgerrit | Dolph Mathews proposed openstack/keystone: Test hyphens instead of underscores in request attributes https://review.openstack.org/258601 | 16:08 |
| pmath | Good morning, keystone! The installation instructions at http://docs.openstack.org/developer/keystone/installing.html require updating as they don't work anymore. | 16:09 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation driver interface https://review.openstack.org/209600 | 16:10 |
| dolphm | pmath: what step doesn't work? do you have a link to a bug report? | 16:14 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation driver interface https://review.openstack.org/209600 | 16:14 |
| pmath | no link; this step: $ python setup.py install | 16:14 |
| dolphm | pmath: ah, try "pip install ." | 16:14 |
| dolphm | i bet setup.py is broken by pbr.. | 16:14 |
| pmath | thanks. | 16:15 |
| pmath | no, that doesn't work either | 16:15 |
| krotscheck_vaca | notmorgan: I'm disagreeing with your "CORS stuff is less important" bit. The reason we're doing CORS is for frontend. For you to say that dashboards aren't part of that is a little like saying "we're arguing campaign finance, but it's not at all about the election" | 16:15 |
| anteaya | oh hey keystone, y'all remembered gerrit goes down in 45 minutes, right? http://lists.openstack.org/pipermail/openstack-dev/2015-December/081037.html | 16:15 |
| * krotscheck_vaca goes back to his umbrella drink. | 16:16 | |
| dolphm | pmath: can you share the errors that you're seeing? | 16:16 |
| notmorgan | krotscheck_vaca: sorry, CORS in each service, i was unclear. now go back to vacation :) | 16:16 |
| openstackgerrit | Steve Martinelli proposed openstack/oslo.policy: clean up incorrect formatting for precedence table https://review.openstack.org/258297 | 16:16 |
| *** fhubik_brb is now known as fhubik | 16:17 | |
| pmath | dolphm: https://gist.github.com/mpath/0af7a6079aa5a3da4e40 | 16:17 |
| *** ekarlso has joined #openstack-keystone | 16:17 | |
| dstanek | pmath: you need to update your pbr | 16:18 |
| dstanek | bummer... no henry today | 16:20 |
| -openstackstatus- NOTICE: Gerrit will be offline for a software upgrade from 17:00 to 21:00 UTC. See: http://lists.openstack.org/pipermail/openstack-dev/2015-December/081037.html | 16:20 | |
| *** agireud has quit IRC | 16:20 | |
| *** daemontool__ has joined #openstack-keystone | 16:21 | |
| pmath | requirements.txt says pbr>=1.6, I'm running 1.8.1 | 16:21 |
| pmath | dstanek: ^ | 16:21 |
| *** agireud has joined #openstack-keystone | 16:21 | |
| *** daemontool has quit IRC | 16:21 | |
| dstanek | pmath: that's the version you have installed at the system level? | 16:21 |
| pmath | yes | 16:21 |
| pmath | this is a greenfield debian 8 vm, someone may want to try to install from scratch and see | 16:22 |
| *** fhubik is now known as fhubik_brb | 16:22 | |
| *** EinstCrazy has quit IRC | 16:23 | |
| dolphm | pmath: on a fresh ubuntu 14.04 box, I ran "apt-get update && apt-get install git python-setuptools && git clone https://git.openstack.org/openstack/keystone.git && cd keystone && python setup.py install" without error | 16:23 |
| dstanek | pmath: i think that error is because of http://git.openstack.org/cgit/openstack/keystone/tree/requirements.txt#n11, which is why i mentioned pbr | 16:23 |
| *** pumaranikar has joined #openstack-keystone | 16:23 | |
| *** ryansb has left #openstack-keystone | 16:24 | |
| dolphm | pmath: i'll try Debian 8 next | 16:24 |
| *** mkoderer has quit IRC | 16:24 | |
| *** mkoderer has joined #openstack-keystone | 16:25 | |
| *** thiagop has joined #openstack-keystone | 16:26 | |
| *** fhubik_brb is now known as fhubik | 16:26 | |
| dolphm | pmath: setup.py install on debian 8 exited cleanly, but oslo_config was not installed | 16:26 |
| stevemar | anteaya: how long is it down for? | 16:26 |
| anteaya | about 4 hours | 16:26 |
| anteaya | that is the window we have carved for ourselves | 16:26 |
| dstanek | pmath: cat you just run 'pip freeze' and paste the output somewhere? | 16:26 |
| anteaya | grab any patches you want to work on locally now | 16:26 |
| dolphm | pmath: looks like you definitely have to use "pip install ." | 16:27 |
| pmath | I'll redo this vm from scratch and report back | 16:31 |
| *** pmath has left #openstack-keystone | 16:31 | |
| *** mfedosin has quit IRC | 16:34 | |
| *** vgridnev has joined #openstack-keystone | 16:35 | |
| openstackgerrit | Dolph Mathews proposed openstack/keystone: Use pip (and DevStack) instead of setuptools in docs https://review.openstack.org/258623 | 16:37 |
| dolphm | dstanek: solution ^ | 16:37 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: SQLAlchemy column type for materialized path https://review.openstack.org/251445 | 16:40 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: SQLAlchemy column type for materialized path https://review.openstack.org/251445 | 16:41 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: SQLAlchemy column type for materialized path https://review.openstack.org/251445 | 16:41 |
| dstanek | dolphm: lgtm | 16:42 |
| *** alejandrito has joined #openstack-keystone | 16:44 | |
| stevemar | dolphm: dstanek in the spirit of documentation: https://review.openstack.org/#/c/258188/ | 16:45 |
| tjcocozz | @dolph https://review.openstack.org/#/c/258623/ | 16:45 |
| tjcocozz | dolphm, https://review.openstack.org/#/c/258623/ | 16:45 |
| stevemar | tjcocozz: no! dolphm is reviewing my stuff now! gosh! | 16:45 |
| *** jasonsb has quit IRC | 16:46 | |
| stevemar | tjcocozz: fix up the typo! go go | 16:46 |
| tjcocozz | stevemar, haha you want me to fix the typo? | 16:46 |
| stevemar | sure, submit another patch, dolph's is already gating | 16:47 |
| stevemar | err not really | 16:47 |
| tjcocozz | stevemar, I can just add an addon patch | 16:47 |
| stevemar | but i'm lazy and i don't want to take it out | 16:47 |
| stevemar | yes sir | 16:47 |
| tjcocozz | stevemar, doing it now | 16:47 |
| stevemar | dstanek: dolphm if i could bug you two for reviews: https://review.openstack.org/#/c/256235/ and https://review.openstack.org/#/c/258302/ are easy | 16:48 |
| dstanek | tjcocozz: you may also want to say 'within the scope of' | 16:48 |
| dstanek | stevemar: sure. | 16:49 |
| dstanek | when is gerrit shut off? | 16:49 |
| tjcocozz | dstanek, will do | 16:49 |
| dstanek | is that in 10? | 16:49 |
| stevemar | dstanek: probably in 10 minutes | 16:49 |
| openstackgerrit | Dolph Mathews proposed openstack/keystone: Use pip (and DevStack) instead of setuptools in docs https://review.openstack.org/258623 | 16:52 |
| dolphm | tjcocozz: dstanek: stevemar: bknudson: fixed typo ^ (why is my spellchecker in vim not working?!) | 16:53 |
| *** jbell8 has joined #openstack-keystone | 16:53 | |
| dstanek | i'm just hoping my gertty sync finishes before the cut off | 16:55 |
| tjcocozz | ebsezim2 | 16:55 |
| *** pnavarro has quit IRC | 16:55 | |
| tjcocozz | well i need to change my vm password now | 16:56 |
| dstanek | lol | 16:56 |
| tjcocozz | lol | 16:56 |
| dstanek | tjcocozz: stop using passwords | 16:56 |
| *** daemontool__ has quit IRC | 16:56 | |
| tjcocozz | dstanek, it was my password to login to sudo | 16:56 |
| dstanek | i allow password-less sudo so i don't have to worry about it | 16:57 |
| bknudson | devstack changed my vm to password-less | 16:57 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Materialized path convenience wrapper https://review.openstack.org/251455 | 16:57 |
| *** browne has joined #openstack-keystone | 17:00 | |
| *** diazjf has joined #openstack-keystone | 17:00 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 17:01 | |
| *** rderose has joined #openstack-keystone | 17:02 | |
| tjcocozz | bknudson, that was nice of them | 17:02 |
| *** daemontool__ has joined #openstack-keystone | 17:03 | |
| -openstackstatus- NOTICE: Gerrit is offline for a software upgrade from 17:00 to 21:00 UTC. See: http://lists.openstack.org/pipermail/openstack-dev/2015-December/081037.html | 17:04 | |
| *** ChanServ changes topic to "Gerrit is offline for a software upgrade from 17:00 to 21:00 UTC. See: http://lists.openstack.org/pipermail/openstack-dev/2015-December/081037.html" | 17:04 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Materialized path convenience wrapper https://review.openstack.org/251455 | 17:04 |
| *** pmath has joined #openstack-keystone | 17:04 | |
| pmath | hello again keystone! | 17:05 |
| tjcocozz | So i am trying to run test under py35 to test a review. I just edited the tox.ini to add py35(https://github.com/openstack/keystone/blob/master/tox.ini#L4) is that the right way to go about it? | 17:05 |
| dstanek | tjcocozz: yep | 17:06 |
| tjcocozz | dstanek, awesome! | 17:07 |
| dstanek | tjcocozz: only because we have a special was to run py3 tests | 17:07 |
| dstanek | otherwise you wouldn't need to edit tox at all | 17:07 |
| tjcocozz | dstanek, what do you mean a special? | 17:07 |
| dstanek | tjcocozz: we list out the tests to run | 17:08 |
| amakarov | gerrit is on sick-leave | 17:08 |
| stevemar | amakarov: lol | 17:08 |
| tjcocozz | dstanek, this is accually in keystoneauth. Do you mean https://github.com/openstack/keystone/blob/master/tox.ini#L21 | 17:08 |
| dstanek | tjcocozz: ah, in ksa you might not need to edit the tox.ini at all | 17:09 |
| *** e0ne has quit IRC | 17:09 | |
| dstanek | tjcocozz: tox has a builtin list of environments that it supports | 17:09 |
| tjcocozz | dstanek, if anything it allows me to just run py35 instead of all the tests | 17:09 |
| dstanek | tjcocozz: ? | 17:10 |
| tjcocozz | dstanek, that is good to know. I was thinking since i could just to 'tox -e py35' instead of tox. is that not right? | 17:10 |
| tjcocozz | s/to/do/ | 17:11 |
| dstanek | tjcocozz: yes, that's right. you shouldn't need to edit the tox.ini for that | 17:11 |
| *** daemontool__ has quit IRC | 17:12 | |
| tjcocozz | dstanek, i didn't know that. trying it now | 17:12 |
| *** ayoung has joined #openstack-keystone | 17:13 | |
| *** ChanServ sets mode: +v ayoung | 17:13 | |
| dstanek | tjcocozz: maybe not. looks like py35 isn't a default environment yet | 17:14 |
| dstanek | tjcocozz: https://testrun.org/tox/latest/example/basic.html | 17:14 |
| bknudson | hey, what happened to gerrit!! | 17:15 |
| tjcocozz | bknudson, it looks like it will be down for 4 hours | 17:16 |
| tjcocozz | http://lists.openstack.org/pipermail/openstack-dev/2015-December/081037.html | 17:16 |
| bknudson | looks like I'll be taking a 4 hour lunch | 17:16 |
| bknudson | now we know how it feels when you can't do an online upgrade. | 17:17 |
| dolphm | bknudson: i think you pushed send too early | 17:17 |
| bknudson | dolphm: I'm terrible at emails | 17:18 |
| pmath | dolphm: dstanek: I was finally able to get keystone to install on debian 8.2 -- here is the history: https://gist.github.com/mpath/e394f72505e2e0acb366 | 17:19 |
| pmath | I think there's a few extra pieces in there so I'm going to go over it again and I'll pr against the instructions when ready. | 17:20 |
| *** fhubik is now known as fhubik_brb | 17:20 | |
| pmath | obvs deb8 is missing a few deps | 17:20 |
| dstanek | pmath: seems to be inline with http://docs.openstack.org/developer/keystone/devref/development.environment.html | 17:21 |
| dolphm | pmath: looks right! after you logged off IRC, i posted a patch to those docs. i'd link to it, but gerrit is down for the next few hours for maintenance | 17:21 |
| ayoung | hey, use the time to triage some bugs | 17:21 |
| pmath | dolphm: dstanek: thank you | 17:21 |
| *** lhcheng has quit IRC | 17:21 | |
| dstanek | pmath, dolphm: maybe we shouldn't have an install from source section in install.html when you really just need to follow much of the development installation instructions | 17:21 |
| dolphm | dstanek: bah, why do we have two different versions of those docs?! | 17:22 |
| dolphm | dstanek: they're way too similar | 17:22 |
| dolphm | dstanek: ++ | 17:22 |
| *** pmath has left #openstack-keystone | 17:23 | |
| *** rderose has quit IRC | 17:23 | |
| *** daemontool__ has joined #openstack-keystone | 17:25 | |
| *** gyee has joined #openstack-keystone | 17:26 | |
| *** ChanServ sets mode: +v gyee | 17:26 | |
| *** fhubik_brb is now known as fhubik | 17:26 | |
| *** lhcheng has joined #openstack-keystone | 17:28 | |
| *** ChanServ sets mode: +v lhcheng | 17:28 | |
| *** lhcheng has quit IRC | 17:33 | |
| tjcocozz | dstanek, I removed py35 from my tox.ini and deleted the folders '.tox' and '.testrepository' and ran 'tox -e py35' and it worked fine. I wonder if they need to update their docs :p | 17:37 |
| *** jistr has quit IRC | 17:42 | |
| *** daemontool__ has quit IRC | 17:43 | |
| *** diazjf has quit IRC | 17:43 | |
| *** daemontool__ has joined #openstack-keystone | 17:44 | |
| *** timcline has quit IRC | 17:48 | |
| *** ducttape_ has joined #openstack-keystone | 17:51 | |
| *** ducttape_ has left #openstack-keystone | 17:51 | |
| *** daemontool__ has quit IRC | 17:51 | |
| *** timcline has joined #openstack-keystone | 17:52 | |
| dstanek | tjcocozz: probably | 17:57 |
| *** diazjf has joined #openstack-keystone | 17:58 | |
| ayoung | lbragstad where are we with the update to Fernet/subsecond changes to get through tempest? Has there been any change in the approach? I realize the gerrit review board is down, or I'd look there. | 18:03 |
| *** EinstCrazy has joined #openstack-keystone | 18:05 | |
| *** e0ne has joined #openstack-keystone | 18:06 | |
| *** ayoung has quit IRC | 18:08 | |
| *** topol has quit IRC | 18:09 | |
| *** EinstCrazy has quit IRC | 18:11 | |
| *** phalmos has joined #openstack-keystone | 18:22 | |
| *** ayoung has joined #openstack-keystone | 18:24 | |
| *** ChanServ sets mode: +v ayoung | 18:24 | |
| *** daemontool__ has joined #openstack-keystone | 18:28 | |
| *** fhubik has quit IRC | 18:32 | |
| bknudson | ayoung: last I saw tempest was passing | 18:33 |
| *** briancurtin has quit IRC | 18:33 | |
| *** briancurtin has joined #openstack-keystone | 18:34 | |
| *** aix has quit IRC | 18:35 | |
| *** vgridnev has quit IRC | 18:35 | |
| *** david-lyle_ has joined #openstack-keystone | 18:49 | |
| *** david-lyle has quit IRC | 18:50 | |
| *** david-lyle_ is now known as david-lyle | 18:54 | |
| *** aginwala has joined #openstack-keystone | 18:54 | |
| *** aginwala has quit IRC | 18:55 | |
| *** aginwala has joined #openstack-keystone | 18:55 | |
| *** btully has left #openstack-keystone | 18:57 | |
| *** urulama has quit IRC | 18:58 | |
| *** urulama has joined #openstack-keystone | 18:58 | |
| *** aginwala has quit IRC | 19:04 | |
| ayoung | bknudson, with Fernet? Excellent. | 19:06 |
| *** woodster_ has quit IRC | 19:06 | |
| bknudson | yes, the fernet test change is passing. | 19:06 |
| bknudson | so next question is whether we make fernet the default | 19:07 |
| bknudson | in keystone | 19:07 |
| *** aginwala has joined #openstack-keystone | 19:07 | |
| ayoung | bknudson, is it considered out of experimental yet? | 19:08 |
| ayoung | I think that comes first | 19:08 |
| bknudson | ayoung: we never marked it experimental. I proposed the change to mark it experimental and that never merged. | 19:09 |
| *** daemontool__ has quit IRC | 19:09 | |
| ayoung | bknudson, So, I thik we can make it the default, then. | 19:09 |
| bknudson | ayoung: y, the only concern is that there's some setup required | 19:09 |
| *** topol has joined #openstack-keystone | 19:09 | |
| *** ChanServ sets mode: +v topol | 19:09 | |
| ayoung | bknudson, devstack supports it? | 19:09 |
| *** daemontool has joined #openstack-keystone | 19:10 | |
| bknudson | ayoung: yes, devstack has allowed setting fernet provider and it sets up the keys for you | 19:10 |
| ayoung | bknudson, so, if we make it default, I'm guessing Puppet will ignore that anyway. Lets see what happens. | 19:11 |
| bknudson | ayoung: but would redhat/debian be ok if keystone defaulted to fernet? you'd have to ship a key database? | 19:11 |
| ayoung | bknudson, we can always change it back if it doesn't work, but...I'll make it work. | 19:12 |
| ayoung | We have tools we can use | 19:12 |
| bknudson | I don't think I've seen the change in keystone to make fernet the default yet. | 19:12 |
| ayoung | bknudson, I'm going to write it now. | 19:12 |
| bknudson | should take 5 seconds, but we'll also want to change devstack so that it sets up fernet key db by default | 19:13 |
| bknudson | currently it only sets up fernet key db if token backend is fernet | 19:13 |
| *** e0ne_ has joined #openstack-keystone | 19:13 | |
| bknudson | because devstack assumes uuid is the default and doesn't require any setup | 19:14 |
| ayoung | bknudson, well, we'll see a failure with the check job, right? | 19:14 |
| *** topol has quit IRC | 19:14 | |
| bknudson | ayoung: yes, the change to keystone default should fail until we change devstack | 19:14 |
| *** e0ne has quit IRC | 19:15 | |
| bknudson | we might want to add a job to keystone for uuid tokens | 19:15 |
| ayoung | then let me get the keystone change submitted, and then we'll work on devstck. I have a couple devstack related changes I need to work on anyway | 19:15 |
| ayoung | bknudson, ++ | 19:15 |
| bknudson | also, keystonemiddleware should have a uuid job | 19:15 |
| ayoung | bknudson, why middleware? It does not care. | 19:15 |
| bknudson | oh, right... we didn't have anything for it. | 19:16 |
| bknudson | not sure if there were plans for it. | 19:16 |
| *** david-lyle has quit IRC | 19:17 | |
| *** david-lyle has joined #openstack-keystone | 19:20 | |
| ayoung | bknudson, heh...this is not going to be a small change. I will let lbragstad do it | 19:23 |
| ayoung | On line change to common/config and a change to the setup for every single test that expects uuid tokens to work | 19:24 |
| bknudson | so not 5 seconds? | 19:24 |
| *** david-lyle_ has joined #openstack-keystone | 19:24 | |
| bknudson | ah, all the config files | 19:24 |
| bknudson | :( | 19:24 |
| ayoung | bknudson, tox is still running ,but I had to do a -r for some reason, so not sure yet | 19:24 |
| *** david-lyle has quit IRC | 19:24 | |
| ayoung | ====== | 19:25 |
| ayoung | Totals | 19:25 |
| ayoung | ====== | 19:25 |
| ayoung | Ran: 5710 tests in 231.0000 sec. | 19:25 |
| ayoung | - Passed: 3425 | 19:25 |
| ayoung | - Skipped: 1389 | 19:25 |
| ayoung | - Expected Fail: 0 | 19:25 |
| ayoung | - Unexpected Success: 0 | 19:25 |
| ayoung | - Failed: 896 | 19:25 |
| ayoung | Sum of execute time for each test: 1740.3483 sec. | 19:25 |
| bknudson | you'd think only 1 test would be required to check what the default provider is. | 19:25 |
| ayoung | bknudson, I kindof want to rewrite UUID in terms of Fernet. I want the only difference between the two to be whether we do crypto | 19:26 |
| bknudson | but I guess we like to assume the defaults for most tests | 19:26 |
| ayoung | bknudson, I think the issue is that all of the tests assumed the default provider was UUID, and the token validation fails without the key setup | 19:26 |
| bknudson | ayoung: I think UUID should be rewritten to be like fernet. | 19:26 |
| *** dims has joined #openstack-keystone | 19:27 | |
| bknudson | fernet shows that we don't have to store the entire JSON blob in the token table. | 19:27 |
| ayoung | ++ | 19:27 |
| ayoung | http://git.openstack.org/cgit/openstack/keystone/tree/keystone/token/providers/common.py#n684 | 19:27 |
| ayoung | bknudson, ^^ that is gyee's soliloqy on the matter | 19:28 |
| bknudson | y, that's for the specific issue of v3 to v2 conversion | 19:28 |
| *** tonytan4ever has quit IRC | 19:29 | |
| *** pai15 has joined #openstack-keystone | 19:29 | |
| *** boris-42_ has joined #openstack-keystone | 19:30 | |
| *** david-lyle_ has quit IRC | 19:30 | |
| ayoung | bknudson, yeah, but the logic is the same: if we have a valid token, we can return the current data instead of the stored data | 19:31 |
| bknudson | y, I totally agree. and it would make the providers more consistent if they worked the same | 19:31 |
| ayoung | bknudson, I think we should make gyee write it again. It will be his 3rd time, IIRC | 19:31 |
| bknudson | ayoung: the FIXME has his name on it. | 19:32 |
| gyee | whahh? | 19:32 |
| gyee | what's the problem? | 19:32 |
| *** phalmos has quit IRC | 19:35 | |
| bknudson | gyee: we made the wrong choice over performance or correctness on http://git.openstack.org/cgit/openstack/keystone/tree/keystone/token/providers/common.py#n684 | 19:35 |
| gyee | sure, get rid of caching on the server side | 19:35 |
| bknudson | since fernet picked the other way | 19:35 |
| gyee | bknudson, if you cache it the middleware, the effect is the same | 19:36 |
| bknudson | auth_token middleware caches fernet tokens, so I guess you could get inconsistent results | 19:37 |
| bknudson | as in, you added a role for the user, you might hit a middleware cache that doesn't have the role | 19:37 |
| gyee | right | 19:37 |
| gyee | but you could also argue that role addition should constitute new token request | 19:38 |
| dolphm | that's caching in a distributed system .. | 19:38 |
| gyee | dolphm, that's caching the token data in Keystone | 19:39 |
| gyee | so we have one DB read instead of multiple | 19:40 |
| ayoung | gyee, if we make the uuid approach consistent with Fernet, we can drop a huge swatch of the revocatio nevents | 19:40 |
| dolphm | gyee: that's caching things in a distributed system wherein keystone and auth_token are both components | 19:40 |
| ayoung | events | 19:40 |
| gyee | ayoung, sure, no objections here | 19:41 |
| ayoung | if we don't have to revoke based on role changes, domain invalidations, etc, the only thing we need to revoke on are actual token-by-id changes. Everything else will be "retyurn the data that as of validation time." | 19:41 |
| ayoung | if a user or proejct is disabled, we will return the token as invalid. | 19:41 |
| ayoung | gyee, so you will fix it? | 19:41 |
| gyee | dolphm, right, it can be done on both sides | 19:42 |
| *** aginwala has quit IRC | 19:42 | |
| gyee | ayoung, sure, I ain't got nothing to do over the holidays :) | 19:42 |
| ayoung | I know that if I try to fix it myself I will be overcome with the desire to refactor the whole thing | 19:42 |
| ayoung | I still want that pipelie | 19:43 |
| ayoung | pipeline | 19:43 |
| gyee | ayoung, pipeline is pretty risky, consider we are in M2 | 19:43 |
| ayoung | gyee, I know. I don't think we can get the rewrite of UUID-as-fernet in Mitaka | 19:43 |
| ayoung | might be worth a try, though | 19:46 |
| gyee | mark it as wip and merge whenever, how we roll | 19:47 |
| *** david-lyle has joined #openstack-keystone | 19:48 | |
| *** daemontool has quit IRC | 19:50 | |
| ayoung | ++ | 19:50 |
| gyee | aoung, how far are we with the token refactoring, last I checked with david8hu, he was stucked at merging AccessInfo? | 19:50 |
| gyee | ayoung ^^ | 19:51 |
| ayoung | gyee lets ee if gerrit tis still down | 19:52 |
| ayoung | yep | 19:52 |
| gyee | yeah still down | 19:53 |
| *** ninag has quit IRC | 19:55 | |
| *** dslev has quit IRC | 19:58 | |
| *** pai15 has quit IRC | 20:06 | |
| *** pai15 has joined #openstack-keystone | 20:06 | |
| *** timcline has quit IRC | 20:08 | |
| *** pai15 has quit IRC | 20:09 | |
| *** pai15 has joined #openstack-keystone | 20:09 | |
| *** topol has joined #openstack-keystone | 20:11 | |
| *** ChanServ sets mode: +v topol | 20:11 | |
| *** topol has quit IRC | 20:15 | |
| *** jbell8 has quit IRC | 20:15 | |
| *** tonytan4ever has joined #openstack-keystone | 20:17 | |
| *** dims has quit IRC | 20:18 | |
| *** topol has joined #openstack-keystone | 20:19 | |
| *** ChanServ sets mode: +v topol | 20:19 | |
| *** dims has joined #openstack-keystone | 20:19 | |
| navidp | hello all | 20:20 |
| navidp | do you know ---->>>> _disable_domain method in resource/core.py when does it get called or used in the code? | 20:20 |
| navidp | I greped for it, it does not seem being called anywhere in the code | 20:20 |
| tjcocozz | navidp, fun tool: http://codesearch.openstack.org/?q=_disable_domain&i=nope&files=&repos=keystone | 20:22 |
| *** timcline has joined #openstack-keystone | 20:22 | |
| dstanek | navidp: did you check that commit? | 20:23 |
| dstanek | navidp: http://git.openstack.org/cgit/openstack/keystone/commit/?id=ffcc81b7a621f3048e19cd0564df5e8b46b6e3a0 see resources/core.py there | 20:24 |
| *** rderose has joined #openstack-keystone | 20:24 | |
| *** mhickey has quit IRC | 20:25 | |
| *** fangxu has quit IRC | 20:25 | |
| *** topol has quit IRC | 20:25 | |
| dstanek | dolphm: in launchpad2trello do you use the guid or short code for the trello_board_id? | 20:27 |
| dolphm | dstanek: uhh it's been a year since i looked at that code before today | 20:28 |
| navidp | yes it is henry nash commit i think | 20:28 |
| *** rderose has quit IRC | 20:28 | |
| dstanek | dolphm: haha, ok. i thought you used it. i can research it further | 20:28 |
| navidp | dstanek, yes it is henry nash commit i think | 20:29 |
| dstanek | navidp: according to git, it was stevemar with notmorgan as a co-author | 20:29 |
| *** jaosorior has quit IRC | 20:29 | |
| dstanek | navidp: the notes say that henry and marekd reviewed it | 20:30 |
| *** aginwala has joined #openstack-keystone | 20:30 | |
| notmorgan | i don't rememnber that patch :P | 20:30 |
| navidp | dstanek, ok | 20:31 |
| dstanek | notmorgan: it left an unused method that navidp was asking about | 20:32 |
| *** pumaranikar has quit IRC | 20:32 | |
| *** pumaranikar has joined #openstack-keystone | 20:32 | |
| dstanek | dolphm: it looks like if can be either and you use the api to make sure you get the guid. | 20:33 |
| dolphm | dstanek: having to deal with both sounds like a familiar problem .. | 20:34 |
| navidp | notmorgan, is it being used https://github.com/openstack/keystone/blob/master/keystone/resource/core.py#L496-L506 | 20:36 |
| notmorgan | navidp: no idea. | 20:37 |
| notmorgan | i haven't looked at that in ages. | 20:37 |
| dstanek | navidp: no, it is not being used in master | 20:38 |
| navidp | notmorgan, sorry to bring it up | 20:38 |
| navidp | dstanek, os it should be removed | 20:39 |
| dstanek | navidp: i don't see why not | 20:39 |
| navidp | dstanek, ok then i will do that | 20:40 |
| *** aginwala has quit IRC | 20:41 | |
| dstanek | navidp: in the commit message mention the change-id that removed the last usage | 20:45 |
| *** aginwala has joined #openstack-keystone | 20:45 | |
| dolphm | ooh, gerrit is back, sort of | 20:45 |
| dolphm | now how do i revert to the UI that's not totally broken | 20:45 |
| *** topol has joined #openstack-keystone | 20:47 | |
| *** ChanServ sets mode: +v topol | 20:47 | |
| tjcocozz | Wow gerrit looks a lot different | 20:47 |
| *** jaosorior has joined #openstack-keystone | 20:48 | |
| *** jaosorior has quit IRC | 20:49 | |
| *** jaosorior has joined #openstack-keystone | 20:50 | |
| *** phalmos has joined #openstack-keystone | 20:51 | |
| *** topol has quit IRC | 20:51 | |
| raildo | tjcocozz: I liked the size section :) | 20:51 |
| tjcocozz | raildo, yeah it is interesting. Took my about 5 minutes on how to submit a review. lol | 20:53 |
| tjcocozz | gerrit, why did you change all your shortcuts? | 20:53 |
| *** lhcheng has joined #openstack-keystone | 20:55 | |
| *** ChanServ sets mode: +v lhcheng | 20:55 | |
| openstackgerrit | ayoung proposed openstack/keystone: Make fernet default token provider https://review.openstack.org/258650 | 20:56 |
| *** fangxu has joined #openstack-keystone | 20:56 | |
| *** lhcheng_ has joined #openstack-keystone | 20:57 | |
| tjcocozz | ayoung, I thought this file was automatically updated https://review.openstack.org/#/c/258650/1/etc/keystone.conf.sample | 20:57 |
| ayoung | tjcocozz, does not mean I should not include it in the review, though | 20:58 |
| ayoung | tjcocozz, that change is kindof the whole reason for this review | 20:58 |
| *** fangxu has quit IRC | 20:58 | |
| tjcocozz | ayoung, I understand that. I wish I new more on how it automacally makes the changes to see if this will break something | 20:59 |
| *** ChanServ changes topic to "~45 days until mitaka-2 is released! see blueprints and bugs at: https://launchpad.net/keystone/+milestone/mitaka-2" | 21:00 | |
| -openstackstatus- NOTICE: Gerrit has been upgraded to 2.11. Please report any issues in #openstack-infra as soon as possible. | 21:00 | |
| *** lhcheng has quit IRC | 21:00 | |
| bknudson | tjcocozz: the automatic job will overwrite whatever's in git with whatever it generates. | 21:00 |
| bknudson | the issue that we've had in the past when config changes were included in the reviews is that it would lead to lots of conflicts | 21:01 |
| tjcocozz | bknudson, that makes sense, just wanted to double check. | 21:02 |
| ayoung | bknudson, if this triggers a conflict something is wrong | 21:02 |
| dstanek | ayoung: i don't think we ever had a real issue, but we constantly had merge conflicts to deal with | 21:03 |
| bknudson | there's an "Add me" button when adding a reviewer now. | 21:05 |
| bknudson | I wonder how to * a change. | 21:06 |
| *** pumaranikar has quit IRC | 21:06 | |
| tjcocozz | bknudson, it looks like its in the top right | 21:07 |
| dstanek | bknudson: star in on the far right side of the review | 21:07 |
| bknudson | thanks! | 21:07 |
| *** pai15 has quit IRC | 21:07 | |
| bknudson | I can also push s to star it | 21:08 |
| *** daemontool has joined #openstack-keystone | 21:08 | |
| htruta | best new feature: see a whole patches chain in the same screen | 21:10 |
| dstanek | i think google needs to get a web designer specifically to fix the gerrit interface | 21:11 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Add audit IDs to revocation events https://review.openstack.org/258141 | 21:11 |
| bknudson | htruta: how do you see patch chain in the same screen? | 21:11 |
| htruta | bknudson: at the right side in the top https://review.openstack.org/#/c/210600/ | 21:12 |
| dstanek | some guy named 'Anonymous coward' owns all of my reviews! | 21:12 |
| bknudson | htruta: that is neat. | 21:13 |
| dstanek | htruta: wasn't that in the old UI too? | 21:14 |
| bknudson | it didn't show the whole chain only next and previous | 21:14 |
| dstanek | the 'same topic' and 'conflicts' tab is cool | 21:14 |
| htruta | dstanek: not in mine... I only could see the immediate next and previous | 21:14 |
| dstanek | bknudson: in the old version you could opt-in to a newer look and feel | 21:14 |
| *** e0ne_ has quit IRC | 21:15 | |
| bknudson | I opted out of the new look because (I think) _ wasn't displayed | 21:15 |
| bknudson | it would just show a space instead. | 21:15 |
| dstanek | bknudson: i never had an issue. i started using it after i was ayoung using it in Boston | 21:15 |
| bknudson | the side-by-side view is looking ok now. | 21:16 |
| bknudson | (not that I have a choice) | 21:16 |
| dstanek | now the real test...going to see if my trello sync still works | 21:17 |
| tjcocozz | bknudson, was there always syntax highlighting? | 21:17 |
| bknudson | tjcocozz: always? I haven't been working with gerrit that long | 21:18 |
| bknudson | as far as I remember there was always rudimentary syntax highlighting | 21:18 |
| bknudson | it would even do python syntax highlighting in rst documents for some reason | 21:18 |
| tjcocozz | bknudson, lol. maybe they just changed the colors, I think the side by side looks a lot better. | 21:19 |
| tjcocozz | bknudson, grr grammar, much better ^^ | 21:20 |
| *** daemontool_ has joined #openstack-keystone | 21:22 | |
| *** daemontool__ has joined #openstack-keystone | 21:22 | |
| *** daemontool has quit IRC | 21:23 | |
| *** raildo is now known as raildo-afk | 21:23 | |
| *** daemontool_ has quit IRC | 21:26 | |
| openstackgerrit | ayoung proposed openstack/keystone: Implied Roles https://review.openstack.org/242614 | 21:27 |
| *** rcernin has joined #openstack-keystone | 21:28 | |
| *** timcline has quit IRC | 21:32 | |
| *** davechen has left #openstack-keystone | 21:35 | |
| *** tonytan4ever has quit IRC | 21:38 | |
| *** phalmos has quit IRC | 21:43 | |
| *** fangxu has joined #openstack-keystone | 21:45 | |
| *** e0ne has joined #openstack-keystone | 21:45 | |
| *** tonytan4ever has joined #openstack-keystone | 21:47 | |
| dolphm | dstanek: were you telling me about someone's nested znc playbooks in tokyo? | 21:50 |
| dstanek | dolphm: nested? | 21:50 |
| bknudson | dolphm: notmorgan? | 21:50 |
| notmorgan | bknudson: hmm? | 21:51 |
| notmorgan | oh i stopped using that | 21:51 |
| notmorgan | bknudson: i use Weechat + screen now | 21:51 |
| dolphm | someone wrote ansible playbooks to have a master znc server to maintain your connection to freenode, and then one znc server per device attached to that | 21:51 |
| notmorgan | dolphm: ^ cc | 21:51 |
| notmorgan | ZNC became more headache to maintain | 21:51 |
| dstanek | i didn't know you can do that. what's the point? | 21:51 |
| *** daemontool_ has joined #openstack-keystone | 21:52 | |
| dolphm | https://doughellmann.com/blog/2015/03/12/deploying-nested-znc-services-with-ansible/ | 21:52 |
| dstanek | all my devices just connect to the same znc server | 21:52 |
| notmorgan | yeah i think that is what i was using | 21:52 |
| notmorgan | but i also have found that weechat > znc | 21:52 |
| bknudson | I use znc on a softlayer vm, works fine. | 21:52 |
| notmorgan | but i also was happier with irrsi than znc | 21:52 |
| bknudson | didn't try the nested one | 21:52 |
| dolphm | dstanek: like, i just switched devices and lost messages that i received because i left the first device connected to znc | 21:52 |
| notmorgan | dolphm: so in short, i had a lot of issues with znc doing that even with the layering | 21:53 |
| notmorgan | it is better with layering | 21:53 |
| notmorgan | but still not great | 21:53 |
| *** daemontool__ has quit IRC | 21:56 | |
| *** daemontool_ has quit IRC | 21:56 | |
| *** _cjones_ has joined #openstack-keystone | 21:59 | |
| *** harlowja has quit IRC | 21:59 | |
| *** thiagop has quit IRC | 22:02 | |
| *** _cjones_ has quit IRC | 22:03 | |
| *** _cjones_ has joined #openstack-keystone | 22:04 | |
| *** daemontool has joined #openstack-keystone | 22:04 | |
| *** harlowja has joined #openstack-keystone | 22:04 | |
| stevemar | any idea on how to revert gerrit to the old look? | 22:04 |
| openstackgerrit | ayoung proposed openstack/keystone-specs: Bootstrap https://review.openstack.org/256634 | 22:05 |
| dstanek | stevemar: it looks like there isn't an opt-out anymore, but maybe dolphm found it | 22:08 |
| dolphm | dstanek: not that i could find | 22:08 |
| openstackgerrit | ayoung proposed openstack/keystone: IAM Models https://review.openstack.org/184651 | 22:09 |
| dolphm | it's pretty broken on smaller screens | 22:09 |
| openstackgerrit | ayoung proposed openstack/keystone: IAM Formatter https://review.openstack.org/189836 | 22:10 |
| ayoung | gyee, so, there is a a string of comments on the Access Info review, and I really don't have time to address them. | 22:13 |
| *** jaosorior has quit IRC | 22:13 | |
| ayoung | https://review.openstack.org/#/c/184651/7 gyee willing to hand this over to david8hu | 22:14 |
| *** diazjf has quit IRC | 22:15 | |
| *** diazjf has joined #openstack-keystone | 22:16 | |
| gyee | ayoung, k, let me talk to him to see where he at | 22:17 |
| openstackgerrit | Merged openstack/oslo.policy: Fixes combined "and" and "or" rule handling https://review.openstack.org/253763 | 22:20 |
| notmorgan | ayoung: oh you're around! | 22:23 |
| notmorgan | hi | 22:23 |
| ayoung | notmorgan, sortof | 22:23 |
| notmorgan | i now totally forgot what i ws going to ask you | 22:23 |
| * notmorgan shrugs | 22:23 | |
| ayoung | notmorgan, Care to +2 this spec? https://review.openstack.org/#/c/256634/ | 22:24 |
| *** gordc has quit IRC | 22:25 | |
| notmorgan | lgtm | 22:26 |
| ayoung | notmorgan, was your question related to the is_admin_project stuff? | 22:27 |
| notmorgan | nope | 22:27 |
| *** diazjf has quit IRC | 22:31 | |
| openstackgerrit | Jamie Lennox proposed openstack/python-keystoneclient: Deprecate Session https://review.openstack.org/258692 | 22:31 |
| openstackgerrit | Jamie Lennox proposed openstack/python-keystoneclient: Deprecate auth plugins from keystoneclient https://review.openstack.org/258693 | 22:31 |
| *** diegows has joined #openstack-keystone | 22:32 | |
| *** e0ne has quit IRC | 22:33 | |
| stevemar | notmorgan: the "r" shortcut stopped working for "review" in gerrit | 22:33 |
| stevemar | *sad face* | 22:33 |
| notmorgan | stevemar: that is not something i can help you with :P | 22:34 |
| jamielennox | i really don't like inner scroll windows | 22:35 |
| jamielennox | i have a browser, it has scroll | 22:35 |
| jamielennox | anything else just gets in the way | 22:35 |
| *** daemontool has quit IRC | 22:40 | |
| openstackgerrit | Tom Cocozzello proposed openstack/keystone: WORK IN PROGRESS List assignments with names https://review.openstack.org/249958 | 22:43 |
| openstackgerrit | Merged openstack/keystone-specs: Bootstrap https://review.openstack.org/256634 | 22:43 |
| *** pai15 has joined #openstack-keystone | 22:44 | |
| *** gildub has joined #openstack-keystone | 22:45 | |
| *** diazjf has joined #openstack-keystone | 22:47 | |
| *** diazjf has quit IRC | 22:48 | |
| openstackgerrit | Merged openstack/keystone: Updated from global requirements https://review.openstack.org/256486 | 22:49 |
| openstackgerrit | Merged openstack/keystone: Correct developer documentation on venv creation https://review.openstack.org/258188 | 22:50 |
| *** tonytan4ever has quit IRC | 22:53 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/258703 | 22:53 |
| *** daemontool has joined #openstack-keystone | 22:55 | |
| dolphm | i literally can't look at the new review screen without being totally distracted by how badly i want to fix it | 22:56 |
| *** harlowja has quit IRC | 23:01 | |
| *** dims has quit IRC | 23:01 | |
| *** ayoung has quit IRC | 23:03 | |
| *** csoukup has quit IRC | 23:04 | |
| gyee | dolphm, yeah, like learning how to walk again :) | 23:04 |
| dolphm | gyee: this is no time for smiley faces | 23:05 |
| gyee | is that an option to get the old UI back? | 23:07 |
| *** rha has quit IRC | 23:07 | |
| *** alejandrito has quit IRC | 23:08 | |
| *** daemontool has quit IRC | 23:09 | |
| *** jrist has quit IRC | 23:11 | |
| *** spotz is now known as spotz_zzz | 23:12 | |
| *** ayoung has joined #openstack-keystone | 23:12 | |
| *** ChanServ sets mode: +v ayoung | 23:12 | |
| *** topol has joined #openstack-keystone | 23:12 | |
| *** ChanServ sets mode: +v topol | 23:12 | |
| *** topol has quit IRC | 23:17 | |
| *** urulama has quit IRC | 23:19 | |
| *** urulama has joined #openstack-keystone | 23:19 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 23:20 | |
| *** dims has joined #openstack-keystone | 23:24 | |
| *** slberger has left #openstack-keystone | 23:25 | |
| *** spandhe has joined #openstack-keystone | 23:25 | |
| *** sdake_ has joined #openstack-keystone | 23:30 | |
| *** aginwala has quit IRC | 23:31 | |
| *** sdake_ has quit IRC | 23:32 | |
| *** pai15 has quit IRC | 23:32 | |
| openstackgerrit | guang-yee proposed openstack/keystonemiddleware: Enforce endpoint constraint https://review.openstack.org/177661 | 23:32 |
| gyee | ayoung, ^^ | 23:32 |
| *** woodster_ has joined #openstack-keystone | 23:41 | |
| ayoung | gyee, would really like to see a test that constrains by URL | 23:41 |
| gyee | ayoung, sure, that's easy to add | 23:42 |
| ayoung | gyee, I think that is likely to be the normal approach, since you know the url withoiut getting a response back from the keystone API to add and nedpoint | 23:42 |
| ayoung | endpoint | 23:42 |
| ayoung | gyee, there are also a couple places where there is a stray letter i... I think someone was getting used to vi | 23:42 |
| ayoung | test_constraint_by_region_and_servicei_no_match(self): | 23:42 |
| gyee | ayoung, yeah, from UX standpoint, it would be a single pass | 23:43 |
| gyee | ayoung, yes, I am a vi guy | 23:43 |
| gyee | old school | 23:43 |
| ayoung | gyee, but it looks good. It could go in as is an I would have no issue with it. Want to give it a tweak ? | 23:43 |
| ayoung | I'll get right on the re-review | 23:43 |
| gyee | ayoung, ya got it, lemme add the test | 23:43 |
| gyee | ayoung, thanks | 23:43 |
| *** aginwala has joined #openstack-keystone | 23:45 | |
| ayoung | gyee, that patch will make this a lot more valuable: https://review.openstack.org/#/c/186979/ | 23:45 |
| gyee | ayoung, yes, I think we did talked about that one awhile back | 23:46 |
| gyee | ah, started in May 29, no wonder it sound familiar | 23:47 |
| ayoung | gyee, you patch plus implied roles and we get a much better story on "Least Privilege" | 23:49 |
| gyee | ayoung, agreed, and trust delegation chain | 23:50 |
| ayoung | gyee, we really need Unified Delegation for that, but yes, it is better | 23:50 |
| openstackgerrit | Ken'ichi Ohmichi proposed openstack/keystone: Enable os_inherit of Keystone v3 API https://review.openstack.org/257580 | 23:56 |
| *** chlong has quit IRC | 23:57 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!